Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Build your own private WireGuard VPN with PiVPN

jeffgeerling.com

Post reply on HN
Print view View original

71–80 of 235 posts

Re: Build your own private WireGuard VPN with PiVPN

#71

Post by beardog »

Toutouxc wrote: post #25

If your main usecase is accessing Home Assistant or exposing a few HTTP endpoints from your home network, you're maybe stuck under several NATs and you don't mind Cloudflare, then I can't not recommend Cloudflare Tunnel. You just run their app on your home server, set up forwarding as if you were setting up nginx or something, click a few buttons in their GUI and your home stuff is online, on HTTPS, with DDoS protect…

If you have the same usecase but DO mind Cloudflare, you can rent a cheap server and use SSH reverse TCP tunneling (ssh -R 8080:localhost:80 proxy@example.com)

Re: Build your own private WireGuard VPN with PiVPN

#72

Post by indeyets »

Denvercoder9 wrote: post #69
indeyets wrote: post #68

Earlier quoted context omitted.

that's "shadowsocks" wireguard is fingerprintable. it's trivial to look at packets and see "this is wireguard". and block the packets Outline traffic looks much more like noise (pre-shared keys, lack of handshake, …)

> that's "shadowsocks" I'm not familiar with the software, but according to Wikipedia it's a client to connect to a SOCKS5 proxy: > Shadowsocks is not a proxy on its own, but (typically) is the client software to help connect to a third-party SOCKS5 proxy, which is similar to a Secure Shell (SSH) tunnel. Are you saying that's incorrect?

that's oversimplification. raw socks5 is a low-level thing without encryption.

shadowsocks puts a solid cryptolayer on top of it, designed specifically to be hard to detect. its Chinese origin gives a hint here: it is created to circumvent detection by "great firewall"

outline builds a user-friendly toolset on top of it

Re: Build your own private WireGuard VPN with PiVPN

#73

Post by chabad360 »

briancmoses wrote: post #23

At the price Raspberry Pis are being sold (scalped) for it's discouraging and disappointing to see content creators continually going to that well. You can buy a travel router like the GL.iNet GL-SFT1200 (Opal) for $39.99. All of Gl.iNet's devices run OpenWRT already. Setting up Wireguard on OpenWRT is easy, and using Tailscale is even easier! Edit: Jeff's been creating awesome Raspberry Pi content for a long time an…

It's actually not simple currently to use Tailscale as an exit node on GL.iNet routers (due to some conflict with mwan3). That's besides the fact that the cheaper routers in their lineup are not very performant and as a sibling mentioned, not capable of running Tailscale.

Re: Build your own private WireGuard VPN with PiVPN

#74

Post by xur17 »

OJFord wrote: post #48
doix wrote: post #42

Earlier quoted context omitted.

What do you mean? That's pretty much how it works. You load up Homedepot website and they along with a bunch of 3rd parties that they partner with will start collecting data about you and storing it. You can't do that to someone from the EU without getting permission along with other restrictions. For Homedepot to comply with GPDR, they would have to treat EU and non-EU users differently, or they could just block EU.…

> For Homedepot to comply with GPDR, they would have to treat EU and non-EU users differently, or they could just block EU. Err, or treat everyone in a compliant way? It's not like you don't already see this within the US anyway - particularly California.

I believe the California law came after the EU one. And it's still easier to just block EU traffic rather than spending several weeks implementing GDPR cookie popups.

And if you decide to treat everyone the same way, you likely end up with a higher bounce rate for the existing US customers. Hence, blocking.

Re: Build your own private WireGuard VPN with PiVPN

#75

Post by twodave »

If you're going this far, might as well do as the author did and add a pi-hole to the mix, issue some credentials to your phone and block ads and/or other stuff via DNS everywhere you go. I also use this to remote into my work computer from wherever I am, using my travel laptop, an iPad or even just my cell phone.

Re: Build your own private WireGuard VPN with PiVPN

#76

Post by megous »

bitlax wrote: post #40
otterpro wrote: post #4

Before going to a long 3 month trip to Asia last year, I installed WireGuard on my Raspberry Pi 1 (original model B from 2012) which was running at home in US. I found PiVPN to be the easiest way to install Wireguard. I didn't know if I even needed a VPN but I was glad, and I was able to use internet as if I were at home. It was weird, but a lot of sites are blocked oversea, even though it shouldn't. For example, I c…

Did you do anything to handle the event where, say, you lose connectivity and the system needs a reboot? Just curious about what would be the best way to handle that scenario.

You can have local watchdog process and reboot to failsafe configuration on next boot. You can also set a timer to do this unconditionally when trying a new network configuration.

Re: Build your own private WireGuard VPN with PiVPN

#77

Post by jrm4 »

Personally, if you're looking for "your own private" thing, I'm a much bigger fan of Tinc. The wireguards and zerotiers seem more appropriate for bigger, more corporate things?

I do wish Tinc had a slightly easier onboarding process, but once it's up, there's a great deal of stuff that I see people dealing with that Tinc users don't have to much think about, especially, e.g. the Mesh deal.

Re: Build your own private WireGuard VPN with PiVPN

#79

Post by vxNsr »

mmlkrx wrote: post #62

Another simple solution I installed on my existing server in actually 5 min via docker run is https://github.com/WeeJeWel/wg-easy . The interface is very simple, and all in all it took 10 min to have the VPN up and running, download the client applications, and connect to it!

Yea this is the route I took, I’m a sucker for a good gui, and this is super simple.

If you use cloudflare for your domain you can use cloudflare-ddns[0] to automatically update your ip if/when it changes.

[0] https://github.com/timothymiller/cloudflare-ddns

Re: Build your own private WireGuard VPN with PiVPN

#80

Post by bovem »

divyenduz wrote: post #70

I have done something similar with Raspberry Pi and Tailscale. Really happy with the setup. Almost 6 months in and works like a charm. https://twitter.com/divyenduz/status/1597863894055518208

Hey I saw you are facing some issue with reauthentication on reboot. If you are running it on a docker container then having a persistent state directory for tailscale might help (TS_STATE_DIR=/var/lib/tailscale).

I use it on my system and it works flawlessly on restarts.

Post reply on HN